ArcSight Upgrades ETRM Platform for Enterprise-Wide Threat and Risk Management

ArcSight Protect ’10 – ArcSight, Inc. (NASDAQ: ARST), a leading global provider of cybersecurity and compliance solutions, today announced major enhancements to the key components of its industry-leading Enterprise Threat and Risk Management (ETRM) platform. New features and functionality will now be included in ArcSight Enterprise Security Manager (ESM), the core analysis engine for managing threats and risks within the ArcSight platform, and ArcSight Logger, the fundamental log storage and search solution within the ArcSight platform. In addition, ArcSight has enhanced ArcSight IdentityView to take advantage of new platform features in ArcSight ESM and added new functionality to the ArcSight Connectors.

The ArcSight ETRM platform enables organizations to operate in a modern business environment that includes virtualized, mobile and cloud architectures. ArcSight ETRM provides visibility into who is on the network, what they are seeing and doing, and how that impacts business risk, regardless of the types of architecture, applications or services used.

“Organizations can no longer simply look for external attacks as the only threat,” said Tom Reilly, president and CEO of ArcSight. “With the number of cyberthreats and attacks on the rise, organizations are learning that a security approach must be multi-dimensional, taking into account all data within an organization, who has access to it and what they are doing at all times. With the new capabilities provided with our ETRM platform, ArcSight provides a single solution to monitor your risk related data across and beyond the enterprise.”

ArcSight ESM 5.0

ArcSight ESM 5.0 is the fifth generation of the core analysis engine of the ArcSight platform, enabling leading global organizations to get better insight into threats and risks in their enterprise. ArcSight ESM is the market-share leader in the Security Information and Event Management (SIEM) market. It provides real-time correlation of threats and risks and now includes new platform features to support a partner economy and broader customer deployment, giving partners the power to build new applications and services around the platform. New platform features include:

• User Risk Monitoring Framework – For powerful analysis of user behavior
• Industry-Specific Field Sets – To support custom applications per industry
• Web Services API – For easy integration to a wide variety of business intelligence and analysis tools
• Developer Framework – For even more powerful rule creation

ArcSight ESM currently protects more than 100 banks, the government systems of over 30 nations, nearly 55 U.S. Federal agencies and more than 50 telecommunication service providers.

“Companies understand the need to improve their risk management strategies, and SIEM is a key component in delivering the appropriate risk analysis intelligence,” said Charles Kolodgy, research vice president for IDC. “SIEM platforms must integrate an increasing number of data feeds, including applications, physical security, and user directory and identity systems, in order to provide the context required for comprehensive risk management.”

IdentityView 2.0

IdentityView 2.0 has been enhanced to take advantage of the new ESM platform features, allowing organizations to better understand who is on the network, what they are doing, and how that affects business risk. ArcSight IdentityView 2.0 also improves compliance and security by detecting shared account usage, role-based access violations and unauthorized user activity.

“As the sophistication and business impact of fraud increase, our customers demand greater insight and visibility on what users do with information assets, to better manage risk,” said Frank Villavicencio, executive vice president, Identropy. “Meeting this need requires an innovative approach that can scale, such that customers can more quickly detect and address issues, mitigating costly losses. ArcSight IdentityView provides the ideal technical underpinning to be able to deliver this next generation solution, which is revolutionizing the traditional identity management landscape, and deriving greater value to our clients.”

“The cloud is a key piece of our customers’ IT strategies, and securing the cloud is of utmost importance,” said Andre Durand, CEO, Ping Identity. “The combination of PingFederate and ArcSight IdentityView brings world class security and monitoring to the enterprise and the cloud.”

Logger 5.0

An industry-leading Universal Log Management solution, ArcSight Logger 5.0, is the underlying data storage and search component of the ArcSight ETRM platform. With Logger 5.0, organizations can capture, store and search on any type of information, anytime. With this version, Logger is now available as an on-demand download for only $49, bringing enterprise-class log management to everyone. For more information, please see the related press release “ArcSight Announces Industry-Leading Universal Log Management Solution, Logger 5.0.”

ArcSight Connectors

ArcSight Connectors enable customers to collect log data from any system, including leading third-party products, custom or legacy systems, and a wide variety of business applications. They capture, clean and categorize log data and deliver it to the ArcSight platform securely. ArcSight SmartConnectors are the industry’s broadest set of pre-built connectors to third-party products, enabling organizations to deliver log data. ArcSight FlexConnectors now include a powerful wizard, making it fast and easy for customers or partners to create new custom connectors.

Availability

ArcSight ESM 5.0, IdentityView 2.0, Logger 5.0 and updates to the ArcSight Connectors are all available now.

ArcSight will host a webinar on September 29 at 10 a.m. (PT) to discuss the new features of the ETRM platform. To register for the webinar titled “The ArcSight ETRM Platform: The Enterprise Cybersecurity Solution,” visit: http://www.arcsight.com/webinars/watch/etrm-platform-enterprise-cybersecurity-solution/.

About ArcSight

ArcSight (NASDAQ: ARST) is a leading global provider of cyber-security and compliance solutions that protect organizations from enterprise threats and risks. Based on the market-leading SIEM offering, the ArcSight Enterprise Threat and Risk Management (ETRM) platform enables businesses and government agencies to proactively safeguard digital assets, comply with corporate and regulatory policy and control the internal and external risks associated with cybertheft, cyberfraud, cyberwarfare and cyberespionage. For more information, visit www.arcsight.com.

Forward Looking Statements

This news release contains forward-looking statements, including without limitation the anticipated benefits of ArcSight’s ETRM platform, the belief that the number of cyberthreats and attacks is on the rise and that organizations are learning that a security approach must be multi-dimensional, and the belief that customers are demanding greater insight and visibility on what users do with information assets to better manage risk as the sophistication and business impact of fraud increase. These forward-looking statements are subject to material risks and uncertainties that may cause actual results to differ substantially from expectations. Investors should consider important risk factors, which include: the risk that demand for ArcSight’s ETRM platform may not increase and may decrease; the risk that alternative solutions may be perceived by customers to be better positioned to help handle enterprise-wide threat and risk management; and other risks detailed under the caption “Risk Factors” in the ArcSight Quarterly Report on Form 10-Q filed with the Securities and Exchange Commission, or the SEC, on September 8, 2010 and the company’s other filings with the SEC. You can obtain copies of the company’s Quarterly Report on Form 10-Q and its other SEC filings on the SEC’s website at www.sec.gov.

© 2010 ArcSight, Inc. All rights reserved. ArcSight, the ArcSight logo and ArcSight Logger are trademarks of ArcSight, Inc.